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^ ■ Abstract 

^y-^ ' We show that any number of parties can coherently exchange any one pure quantum state 

fSJ I for another, without communication, given prior shared entanglement. Two applications of 

this fact to the study of multi-prover quantum interactive proof systems are given. First, we 
' (— i ' [ prove that there exists a one-round two-prover quantum interactive proof system for which 

O i' no finite amount of shared entanglement allows the provers to implement an optimal strat- 

egy. More specifically, for every fixed input string, there exists a sequence of strategies for the 
^ • provers, with each strategy requiring more entanglement than the last, for which the probabil- 

ity for the provers to convince the verifier to accept approaches 1. It is not possible, however, 
for the provers to convince the verifier to accept with certainty with a finite amount of shared 
entanglement. The second application is a simple proof that multi-prover quantum interactive 
proofs can be transformed to have near-perfect completeness by the addition of one round of 
communication. 






> 
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1 Introduction 

^. 

t:J- ' The idea that entanglement may be used as a resource is central to the theory of quantum commu- 

^ . nication and cryptography. Well-known examples include teleportation ||BBC^93| and the super- 

Q I dense coding of both classical and quantum data IIBW921 IBSST021 IHHL04I . In cryptography, en- 

IJ • tanglement is used not only in some implementations of quantum key-distribution IIEke91L but 

• r-j . also as a mathematical tool in security proofs IILC99i rSP00l of quantum key-distribution protocols 

r> I not based on entanglement (such as IIBB84I ). In these settings it may be said that the relationship 

C^ ' between entanglement and other resources (in particular quantum communication, classical com- 

munication, and private shared randomness) is reasonably well-understood IIBDSW961 IDHW041I . 
There are, on the other hand, settings of interest where the properties of entanglement as a 
resource are very poorly understood. One example can be found in quantum commtmication 
complexity, wherein it is not known if prior shared entanglement ever gives an asymptotic reduc- 
tion in the number of qubits of communication required to solve general communication problems 
||Wol02, Bra03J. A second example, which is the main focus of this paper, concerns the power of 
entanglement in the multi-prover interactive proof system model, w^hich has been studied in sev- 
eral recent papers IIKM031 ICHTWOil IWeh06l fCSUU07l [CGjOTl lKKM+071 IKRT07II . Bell inequalities 
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|Bel64l |CHSH69|I . and many of the open problems concerning them IIGis07L have a fundamental 
connection to this model (although not necessarily to our main results). 

Multi-prover interactive proof systems, which were first defined by Ben-Or, Goldwasser, Kil- 
ian, and Wigderson [BOGKW88J, involve interactions among a verifier and two or more provers. 
The verifier is always assumed to be efficiently implementable, while the provers are typically 
permitted to have arbitrary complexity. The verifier and provers each receive a copy of some in- 
put string X, and then engage in an interaction based on this string. During this interaction the 
verifier communicates privately with each of the provers, possibly over the course of many rounds 
of communication, but the provers are forbidden from communicating directly with one another. 
The provers may, however, agree on a joint strategy before the interaction begins. 

The provers act in collaboration to convince the verifier that the input string x is a yes-input to 
some fixed problem, and therefore should be accepted. The provers are not, however, considered 
to be trustworthy, and so the verifier must be defined in such a way that it rejects strings that are 
no-inputs to the problem being considered. These two conditions — that the provers can convince 
the verifier to accept yes-inputs but cannot convince the verifier to accept no-inputs — are called 
the completeness and soundness conditions, respectively, and are analogous to the notions in math- 
ematical logic that share these names. In contrast to the notion of a mathematical proof, however, 
one typically requires only that the completeness and soundness conditions for interactive proof 
systems hold with high probability (for every fixed yes or no input string). 

The study of interactive proof systems, including single-prover and multi-prover models, has 
had an enormous impact on the fields of computational complexity and theoretical cryptogra- 
phy IIAB06llGol01i . In particular, multi-prover interactive proof systems, and the characterization 
of their expressive power IIBFL91|I . led to the discovery of the PCP (or Probabilistically Checkable 
Proof) Theorem lALM+98[ IAS981 IDin07L which was a critical breakthrough in understanding the 
hardness of approximation problems. 

In the quantum setting, one must consider the possibility that the provers initially share en- 
tanglement, which they might use as part of their strategy during the interaction. With this seem- 
ingly small change, nearly everything we know about classical multi-prover interactive proof sys- 
tems becomes invalid within the quantum model. The following points illustrate the effect of this 
change on our current state of knowledge. 



• 



When the provers are not allowed to share prior entanglement, it is known that the class of 
promise problems that have multi-prover interactive proof systems is precisely NEXP, the 
class of problems that can be solved nondeterministically in exponential time. This holds for 
both classical l|BFL91|l and quantum l|KM03ll multi-prover interactive proofs. 

• There are no nontrivial bounds known for the class of promise problems having multi- 
prover interactive proofs when the provers initially share entanglement, including the cases 
of both a classical and quantum verifier. At one extreme, such proof systems could have the 
same expressive power as single-prover interactive proof systems, and at the other extreme 
it is possible that uncomputable problems have such proof systems. 

One very basic question about multi-prover interactive proofs w^ith entangled provers has re- 
mained unanswered, and is closely related to the lack of good upper bounds on their pow^er: For 
a given verifier and input string, how much entanglement is needed for the provers to play optimally? To 
obtain an upper bound on the expressive power of multi-prover interactive proofs with entangled 
provers, one seeks a general bound: a limit on the amount of entanglement, as a function of the 
verifier's description and the given input, needed for the provers to play optimally. 



Our first main result explains the difficulty in answering this question: we prove that there 
exist two-prover quantum interactive proof systems for which no finite amount of entanglement 
allows for an optimal strategy on any fixed input. In other words, there are interactive proofs 
such that, no matter what entangled state the provers choose on a given input, it would always be 
possible for them to do strictly better with more entanglement. There is, therefore, no strict upper 
bound of the form discussed above. This fact has an obvious but important implication; one must 
consider upper bounds on entanglement for dose-to-optimal strategies if this approach is to yield 
upper bounds on the power of multi-prover quantum interactive proofs. 

Our second main result concerns methods to achieve perfect completeness of quantum interac- 
tive proof systems while retaining small soundness error. In the single-prover case, an efficient 
transformation for doing this exists that is both simple and easy to analyze BKWOOL In the multi- 
prover setting, an analogous result was recently obtained by Kempe, Kobayashi, Matsumoto, and 
Vidick IIKKMV08II based on a much more complicated transformation and analysis. This more 
complicated transformation was designed to handle the locality constraints imposed on multiple 
provers. It turns out, however, that this complicated procedure is not needed after all, provided 
one is willing to make a small sacrifice. We prove that the simple single-prover technique can be 
applied in the multi-prover case to yield a proof system with near-perfect completeness: honest 
provers are able to convince the verifier to accept yes-inputs with any probability smaller than 1 
that they desire — but they might never reach probability 1 using finite resources. (For instance, 
the provers may choose to cause the verifier to accept yes-inputs with probability 1 — e(n) where 
e(n) is the reciprocal of the busy beaver function. The implementation of such a strategy, however, 
could require an enormous amount of prior shared entanglement.) 

The two main results just discussed are connected by the notion of coherent state exchange, 
which is discussed in the next section. The first main result is then proved in Section |3l while 
the second is proved in Section |4l The paper concludes with Section |5l Throughout the paper 
we assume the reader is familiar with quantum computing and with basic aspects of classical 
and quantum interactive proof systems. Our notation and terminology are consistent with other 
papers on these topics. 

2 Coherent state exchange 

We begin by defining coherent state exchange as follows. Consider m players Pi, ... , Pm', and sup- 
pose, for each i G {1, . . . ,ra}, that player P,- holds a quantum system whose associated Hilbert 
space is denoted X' . The spaces X^ and X^ need not have equal dimension for / 7^ /'. For two 
chosen pure states \^) ,\ip) G A"^ (8) ■ • ■ (8) A"'", we consider the situation in which the players wish 
to transform a shared copy of |^) into \\p), or vice- versa. We require that this task is completed 
(1) without communication and (2) by a coherent process. 

To say that a process that performs state exchange is coherent means that it can be applied in 
a way that preserves superpositions. In particular, this means that it is possible for the players to 
implement a transformation of the form 

H0'")|7)+/5|l'")|</))^*|0"')|7)+/5|l'")|t/;), 

w^here the first m qubits represent control qubits, with one held by each player, and where the state 
I7) ^ X^ ^ ■ ■ ■ (S> X'" represents an arbitrary state shared by the players. 

In the absence of additional resources, it is not possible in general to perform this task when 
m > 2. In particular, given that the players cannot create entanglement out of thin air, the task 
is easily seen to be impossible when the target state \xp) has more entanglement than the initial 



state I (p) . However, if we consider the situation in which the players initially share an auxiliary 
quantum state, and we allow this state to be perturbed slightly by the process, then the above 
impossibility argument based on entanglement is no longer valid — and as we will show^, the task 
indeed becomes possible. We note that the coherence condition requires that a process of this 
sort to leave the auxiliary quantum state nearly unchanged, in essence using it as a catalyst. The 
players cannot, for instance, simply swap the input state |^) with an initially shared copy of \tp) 
without losing coherence. 

For the case of m = 2, one solution to this problem can be obtained through the use of van Dam 
and Hayden's quantum state embezzlement IIDH03L In quantum state embezzlement, two parties 
(Alice and Bob) perform a transformation of the form |E]v) i— > |E^) \(p), for some shared entangled 
state 1^) of their choice, where {jEw)} is a special family of states defined so that it is possible to 
perform such a transformation in which |E]v) ~ \^'n) ^^^ large N. Thus, they "embezzle" \(p) 
from |E]v), leaving little trace of their crime. The process for doing this described by van Dam 
and Hayden is coherent and requires no communication, and can therefore be done twice (once 
in reverse) to achieve coherent state exchange. It relies, however, on a representation of two-party 
pure quantum states that no longer exists for m-party states when m > 3. 

Here, w^e show that coherent state exchange for any number of parties is always possible, with 
near-perfect coherence. To simplify the description of the procedure, we will assume that |^) and 
\xp) are orthogonal. (The more general case where \(p) and \xp) are not necessarily orthogonal is 
easily handled, and is discussed in the appendix.) 

Let N be a positive integer, which will determine the accuracy of the procedure. We assume 
that each player P, holds N + 2 identical registers labelled Xg, . . . , Xj^^^^, where each register has 
an associated Hilbert space that is isomorphic \.o X\ We take the initial state of the registers 
(Xj X-) {X\,^, X-+i)tobe 

and we consider the case where the initial state of the registers (Xj, . . . , Xg') is the input state |^) . 
Thus, the state ^ represents the entanglement initially shared by Pi, ... , P,„. The procedure that 
transforms |^) into |t/^) is simple: each player P, cyclically shifts the contents of the registers 
Xg, . . . , Xjv^^^ by applying a unitary operation defined by the action 

l^o) l^l) ■ • ■ I^N+l) ^ I^N+l) l^o) ■ ■ ■ \Xn) 

on standard basis states. 

Let us now consider the properties of the above procedure. It is clear that after the cyclic 
shift, the registers (Xj, . . . , Xg') will contain a perfect copy of \\p), and the remaining registers will 
contain the state 

n) = ^-LWf^"^"^ \^f^'''"^ ■ (2) 

Thus, the procedure transforms \(p) |£n) into \'ip) |E^). It is easily checked that (E^jE^f) = 1 — 
1/N, so for large N there is only a small disturbance to the shared entangled state |Ej^). The 
procedure satisfies the coherence requirement for this reason. 

In the case that the players wished instead to transform \\p) to \(p), so that the initial state of 
the registers (Xg, . . . ,Xq) is \^p) , the same state (d) may be used, but the registers are shifted in the 
opposite direction. 



Further connections to embezzlement and other work 

A notion related to coherent state exchange, known as catalytic transformation of pure states, was 
considered by Jonathan and Plenio |JP99| . In particular, they considered the situation in which two 
parties transform one pure state to another (by local operations and classical communication) us- 
ing a catalyst — or a state that assists but is left unchanged by the process. Coherent state exchange 
(and embezzlement) do almost exactly this, and without the exchange of classical information, but 
in the approximate sense that the catalyst is permitted to change slightly. 

As mentioned above, in the case m = 2 one may use quantum state embezzlement twice to 
implement coherent state exchange. The family of states {|£n)} defined in IIDH03II also has the 
added property of being universal, or independent of the state |^) to be embezzled. We note that it 
is possible to use our method to give universal embezzling families for all m. To define a universal 
embezzling family for any fixed m, we may consider an e-net of states {[i/')} in N"' dimensions 
(for e = 1/N, say), take |^) = |0"^), and define the embezzling state for each N to be the tensor 
product of all the states |£n) ranging over the £-net. The embezzlement of a particular state is 
then performed in the most straightforward way. Unlike the families of van Dam and Hayden 
for the case m = 2, our method is highly inefficient, but nevertheless establishes that universal 
embezzling families exist for all m. 

3 Finite entanglement is suboptimal 

The purpose of this section is to prove the first main result of the paper, which is that there exist 
two-prover quantum interactive proof systems for which no finite amount of entanglement allows 
for an optimal strategy on any fixed input. It suffices to define a two-prover quantum interactive 
proof system having no dependence on the input x; or, in simpler terms, to consider a cooperative 
game played by two players and moderated by a referee. This type of cooperative quantum game 
represents a generalization of the non-local games model of ||CHTW04L where now the referee can 
send, receive, and process quantum information. 

To be more precise, and to aid in the exposition that follow^s, we define two-player, one-round 
cooperative quantum games as follows: 

1. The referee prepares three quantum registers (R, S, T) in some chosen state, and then sends 
S to Alice and T to Bob. 

2. Alice and Bob transform the registers S and T sent to them however they choose, resulting 
in registers A and B that are sent back to the referee. 

3. The referee performs a binary- valued measurement on the registers (R, A, B). The outcome 1 
means that Alice and Bob win, while the outcome means that they lose. 

The restrictions on Alice and Bob are the same as for provers in a quantum interactive proof 
system: they are not permitted to communicate once the game begins, but may agree on a strategy 
beforehand. Such a strategy may include the sharing of an entangled state of their own choosing, 
which they may use when transforming the registers sent to them. The complexity of the referee, 
which corresponds to the verifier in an interactive proof system, is ignored given that we no longer 
consider an input string. 



Description of the game 

Consider the two-player cooperative quantum game that is determined by the following specifi- 
cation of the referee: 

1. Let R be a qubit register and let S and T be qutrit registers. The referee initializes the registers 
(R,S,T) to the state 

-^|0)|00) + -^|l)|</>) 
where 

!</>) = ^|n) + ^|22). 

^2' ' v/2' ' 
The registers S and T are sent to Alice and Bob, respectively. 

2. The referee receives A from Alice and B from Bob, where A and B are both single-qubit reg- 
isters. The triple ( R, A, B) is measured with respect to the projective measurement {IIo, Hi }, 
where YIq = I — I7) (7I and Oi = I7) (7I, for I7) = (|000) + |lll))\/2. In accordance with 
the conventions stated above, the outcome 1 means that Alice and Bob win while means 
that they lose. 

The intuition behind this game is as follows. Alice and Bob are presented w^ith tw^o possibil- 
ities, in superposition: they receive either the unentangled state |00) or the entangled state |^). 
Their goal is essentially to do nothing to |00) and to convert |<^) to |11), for they want the ref- 
eree to hold the state I7) when the final measurement is made. These transformations must be 
done coherently, without measurements or residual evidence of which of the two transformations 
|00) I— > |00) or 1^) 1-^ |11) w^as performed, for otherwise the final state of the referee will not have 
a large overlap with I7). 

The required transformation will be possible using coherent state exchange, with a winning 
probability approaching 1. It will be shown, however, that it is never possible for Alice and Bob to 
win with certainty, provided they initially share a finite entangled state. 

Strategies that win with probability approaching 1 

We now present a family of strategies for Alice and Bob that win w^ith probability approaching 1. 
In the above game, Alice receives S from the referee and returns A; and likewise for Bob with 
registers T and B. Alice will begin with the qubit A initialized to |0), and Bob begins with B 
initialized to |0) as well. Let LZ be a unitary operation, acting on a pair consisting of a qutrit and a 
qubit, with the following behavior: 

U : |0) |0) ^ |0) |0) , Ji: |1) |0) ^ |1) |1), and !J : |2) |0) ^ |2) |1) . 

Upon receiving S, Alice applies U to (S, A), and Bob does likewise to (T, B) after receiving T. This 
leaves the 5-tuple (R, A, B, S, T) in the state 

-^ 1000) |00) + -^ [111) 1^). 

Alice and Bob have not yet sent A and B to the referee. Before sending these registers, they use 
them as control qubits to transform registers S and T in superposition: if A and B are set to then 



nothing happens, while if A and B are 1 they perform coherent state exchange, transforming \(p) 
to 1 00). Assuming that Alice and Bob initially share the entangled state 



1 N 

-1- \-^ 1 .\»/c |p,p.\®(N-/c+l) 



EN) = ^E\'pf m'' 



N,=i 



the resulting state is 



for 



^ |000) |00) |£m) + A= |111) |00) \E'^) 



1 N 






The registers A and B are now sent to the referee, whose measurement results in outcome 1 
with probability 

1 1^1 

- \En) + - \EL) = 1 - — . 

Impossibility to win with certainty 

Now we will prove that Alice and Bob cannot win with certainty regardless of the strategy they 
employ. Without loss of generality, it may be assumed that Alice and Bob initially share a pure 
entangled state \ip) G ^a ^ '^b, where the spaces Xa and Xb have the same dimension d. When 
Alice and Bob receive S and T from the referee, the state of the entire system is given by 

l=\Q)\OQ)\^)+l=\l)\<p)\^). 

General quantum operations performed by Alice and Bob can be described by linear isome- 
tries: A for Alice and B for Bob. These isometries take the form A : S ® Xa -^ A® 3^a and 
B : T (^ Xb ^ B (^ 3^B, where S, T , A, B are the spaces associated with the registers S, T, A, and 
B, and the spaces 3^^ and 3^b are arbitrary. The state of the system immediately before the referee 
measures is therefore 

-^ |0) {A ® B) |00) It/.) + -L |1) (A ® B) !</>) It/;) . 

By defining operators Aq, Ai G L (5 (8) Xa, 3^a) and Bq, Bi G L (T (g) X^, 3^b) as 

Ao = ((0|^7)A, Ai = ((l|^7)A, Bo = ((0|^I)B, Bi = ((l|®7)B, 
we may express the probability that Alice and Bob win as 

i II (Ao ® Bo) |00) It/;) + (Ai ^ Bi) |</)) It/;) ||2 < 1 + 1 I {<p\ {xp\ {AlAo ^ Bi*Bo) |00) \xp) \ . 

We have that || AJAq || < 1 and || B^Bq || < 1, and therefore it is possible to express both A^Aq 
and B^Bq as convex combinations of unitary operators. By convexity, the w^inning probability is 
therefore bounded above by 

1 + 1\{4>\{^\{Ua(S)Ub)\00)\xP)\ 




*(0 



Figure 1: An entanglement-assisted local quantum operation O. An input state ^ G D [Xa (8) -^b) 
is transformed into the output state O(^) by means of local quantum operations Y^ and Yg, along 
with a shared entangled state p G D {Za (Si Zb). 



for some choice of unitary operators Ua and fig. Notice that {Ua ® Ub) |00) \xp) must have 1 e-bit 
of entanglement less than |^) \ip), and so the states cannot be equal — and therefore the success 
probability cannot be 1. 

A quantitative bound may be proved as follows. Using one of the Fuchs-van de Graaf inequal- 
ities [FvdG99l and the monotonicity of the fidelity under partial tracing, it holds that 



{(p,xp\UA^UB\00,ip)\ <F(p,^) < Jl 



1 
4 



till 



for 



^ = Jrs^;,^UA{\00){00\(S\ip){ip\)WA. 



At this point we may follow precisely the analysis of van Dam and Hayden IIDH03II for the near- 
optimality of their universal embezzling families: we have that S{p) — S(^) = 1, from which it 
follows that II |0 — ^11 2 > l/(21og(3(i)) by Fannes' inequality IIFan73L Consequently, the winning 
probability is bounded above by 1 — 1/(32 log (3d)). The error probability therefore decreases at 
most quadratically in the number of qubits that Alice and Bob initially share. 



Consequences for entanglement assisted local quantum operations 

For fixed spaces Xa, Xb, yA, and 3^b, a quantum operation O : L [Xa '5^ Xb) ^ L (3^^ (8) 3^b) is an 
entanglement assisted local quantum operation if it can be realized as illustrated in Figure [H or more 
precisely, if there exists some choice of spaces Za and Zg, a density operator p G D {Za <S Zb), 
and admissible super-operators Y^ : L [Xa ^ Za) -^ L (3^a) and Yg : L (Afg (8) Zg) -^ L (3^g) 
such that O(^) = (Y^ (8 Yg ) (p (g) ^) for all ^ G L {Xa ®Xb). Operations of this type are also 
known as localizable operations IIBGNPOll . In addition to having an obvious relevance to two- 
prover quantum interactive proof systems, this is an interesting and fundamental class of quantum 
operations in its own right. 

An unfortunate fact that follows from the analysis of the game presented above is the follow- 
ing. When Xa and A'g have dimension at least 3 and yA and 3^g have dimension at least 2, the 
set of entanglement-assisted local quantum operations O : L [Xa (^ Xb) -^ L (J^^ (g) J^g) is not a 



closed set: the sequence of entanglement-assisted local quantum operations induced by the strate- 
gies described above converges to a valid quantum operation that is not an entanglement-assisted 
local quantum operation. 

Another connection with prior work 

We wish to point out one further connection between the above result and some existing work. 
In the exact catalytic transformation setting of Jonathan and Plenio |JP99| , Daftuar and Klimesh 
IIDKOlll proved the following fact: the dimension of the catalyst required to transform one state 
to another, when this is possible, cannot be bounded by any function of the dimension of those 
states. Although this fact does not have a direct implication to the cooperative quantum games 
model, and is incomparable to our result as far as we can see, there is a similarity in spirit between 
the results that is worthy of note. 

4 Near-perfect completeness 

Kempe, Kobayashi, Matsumoto, and Vidick IIKKMV08II proved that multi-prover quantum inter- 
active proof systems can be efficiently transformed to have perfect completeness, while retaining 
small soundness error. An analogous fact was previously shown to hold for single-prover quan- 
tum interactive proof systems IIKWOOL but the two proofs are quite different. The proof in IIKWOO|l 
for the single-prover case is very simple while the proof in IKKMV08| for the multi-prover case 
is rather complicated. In this section we show that the use of coherent state exchange allows the 
simple proof for the single-prover setting to be applied in the multi-prover setting. 

There is, however, one small caveat: whereas Kempe, Kobayashi, Matsumoto, and Vidick 
achieve truly perfect completeness (in as far as quantum operations can ever be implemented 
perfectly), we must settle for near-perfect completeness: similar to the game from the previous sec- 
tion, honest provers will be able to convince the verifier to accept yes-inputs with any probability 
smaller than 1 that they desire, but the probability may not in actuality be 1. For most intents and 
purposes, though, we believe that this behavior can reasonably be viewed as representing perfect 
completeness. 

Suppose that a verifier V interacts with m provers Pi, . . . ,Pm for r rounds, and suppose the 
completeness and soundness probabilities for this verifier are given by c and s, respectively (which 
may be functions of the input length). Specifically, for the promise problem A = (Ayes, ^no) of 
interest, the following conditions hold: 

1. Completeness. The verifier is convinced to accept every yes-input x G Ayes 'with probability 
at least c( | x | ) by the provers' strategy. 

2. Soundness. The verifier cannot be convinced to accept any no-input x G Ano with probabil- 
ity exceeding s( | x |), regardless of the provers' strategy. 

As usual and without loss of generality, we may "purify" a given proof system so that the verifier 
V and provers Pi, . . . ,Pm are described by unitary operations and the provers' initial shared entan- 
glement is pure. We also make two simple assumptions on the proof system and the completeness 
probability c(|x|). First, we assume that it is possible for the provers to convince the verifier to 
accept every string x G Ayes 'with probability exactly c(|x|). This can be achieved, for example, 
by appending an extra bit to the last message of the first prover and having the verifier reject 



when this bit is 1. Second, we assume that the value c(| x |) is such that the verifier can efficiently 
implement the rotation 

|0) ^ ^l-c(|x|)|0) - y^|l) , |1) ^ y^|0) + ^l-c(|x|)|l) 

without error. (We also assume reversible computations incur no error.) 

Now, assume that an input string x G Ayes U Ano has been fixed. (As x is now fixed, we 
w^ill not explicitly refer to x or | x | w^hen discussing quantities depending on x.) Let p denote the 
probability that the verifier accepts. Given the purity assumption of the proof system, this means 
that the final state of the entire system at the end of the interaction may be expressed as 



Vl^|0)|</'o) + v^|l)|</'i), 

w^here the first qubit in this expression represents the verifier's output qubit. The remaining part 
of the state, represented by \(po) and \(p-[), corresponds to the state of every other register in the 
proof system, shared in some arbitrary way among the verifier and provers. For simplicity we 
will assume that \(p()) and |^i) are orthogonal, which at most requires that the verifier makes a 
pseudo-copy of the output qubit as its last action. 

To transform the proof system to one with near-perfect completeness, one additional round of 
communication is added to the end of the protocol. To describe what happens in this additional 
round of communication, let us write A to denote the verifier's output qubit, V to denote the 
register comprising all of the verifier's memory aside from the output qubit, and Pi, ... , P,„ to 
denote registers representing the provers' memories, all corresponding to the final state of the 
original protocol. 

To start the additional round of communication, the verifier prepares m additional single-qubit 
registers Ai, . . . , A,„ as pseudo-copies of A, so that the state of the system becomes 



71^10)10'") |^o) + v/p|l)|l'")|</'i). 

The verifier then sends V to the first prover Pi (which is an arbitrary choice, but one that all provers 
are aware of), and sends each register A, to prover P,-. 

Upon receiving these registers from the verifier, the provers perform the following actions. 
First, using the registers (Ai, . . .,A,„) as control qubits, the provers perform coherent state ex- 
change: when each register A, contains 0, nothing happens; and w^hen each register A, contains 1, 
the state |<^i) is exchanged for |<^o)- The resulting state of the entire system is 



1 N 

i \-^ , . .(g)k I , \(x)(N-/:+l) 



yr^lO) 10-) |<^o) |En) + v^|l) \n \cPo) |Em). 
where 

VNk^i 

is an additional shared entangled state the provers use for this purpose, and \E'j^) is defined in 
the same way as in Section |2l (This expression of |En) makes use of the assumption that |^o) 
and l^i) are orthogonal. One may instead consult the discussion in the appendix, which does 
not require this assumption.) The number N is the provers' choice for an accuracy parameter, 
which we assume to be as large as they wish. Once this is done, the provers return the registers 
Ai, . . . , A„; to the verifier. 

The final step is that the verifier measures the registers (A, Ai, . . . , A^) with respect to a basis 
containing the state \/l — c |0) |0'") + \^\l) |1'")' accepting if the output matches this state. (This 
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is possible given our assumptions on c.) In the case that x G Ayes the provers may take p = c, and 
so the acceptance probability is 

||(1-c)|En)+c|E^)||'>1-2^. 

This is arbitrarily close to 1, given that the provers may take any value for N. In the case that 
X G Ano we have p < s, from which it is routine to show that the acceptance probability is at most 



VsVc+ Vl-sVl-c) <l-(c-s) 

5 Conclusion 

We have discussed two applications of coherent state exchange to the study of multi-prover quan- 
tum interactive proof systems. 

The first application demonstrates that provers in a multi-prover quantum interactive proof 
system may not always have an optimal strategy when limited to finite entanglement. We view 
that the primary importance of this fact is that it will serve to better focus efforts on proving 
bounds on the amount of entanglement needed for close-to-optimal provers in multi-prover quan- 
tum interactive proofs — for such bounds can only exist in general for close-to-optimal and not 
optimal success probability. 

The second application is a simple proof that multi-prover quantum interactive proof systems 
can be efficiently transformed to have near-perfect completeness by adding one round of commu- 
nication. There is a trade-off between this proof and the proof of Kempe, Kobayashi, Matsumoto, 
and Vidick IIKKMV08L which is that it is considerably simpler but cannot be said to achieve abso- 
lutely perfect completeness. 

A few other applications of coherent state exchange have also been mentioned. In particular, 
w^e have proved that the collection of entanglement-assisted local quantum operations on systems 
of dimension 3 and higher is not a closed set, and we have proved that (highly inefficient) univer- 
sal embezzling families exist for any number of parties. It remains to be seen to what extent such 
families can be made more efficient. 
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A Coherent exchange of non-orthogonal states 

Here we briefly discuss coherent state exchange for non-orthogonal states \(p) and \ip). The sim- 
plest method that we have considered requires that 

dim(A'i(g)---(g)A"") >3, 

which is immediate provided that m > 2 and that each A"' is non- trivial. One may then choose 
any state |//) G ^'^(^'■••(X'A:''" that is orthogonal to both \(p) and \xp), and perform two state 
exchanges: first from |^) and |f/) and then from \ri) to \xp). The auxiliary state naturally takes the 
form |E]v) \Fj^), where |Ejv) is used to transform |^) to |;/) and |Fn) is used to transform |j/) to \ip). 
Aside from this change, no new^ analysis is required. 

Another method is as follows. Suppose {(p\ip) = ae'^ for a > 0, and define \xp) = e^'^ \ip). 
It is easy to coherently exchange \ip) for \xp) hy letting one player induce a global phase (which 
translates into a phase shift on a control qubit if the process is performed in superposition). Thus, 
it remains to exchange |^) for \{p). If fl = 1 there is nothing to do, while if a < 1 this may be done 
in a similar way to the orthogonal case, through the use of the state 



N 



1 ^ . -0lc| r\®(N-/:+l) 



The only difference between this state and the one in ^ is the normalization — it is obvious that 
^'^ < Ni < N^, and more explicitly we have 

Ni = N - la- -2 . 

1 — fl (1 — fl)^ 



For 



we have 



1 N 



Nu=i 



^ — a^ 1 

(E^vIEn) = 1-— -—<!--. 



As is not surprising, the efficiency is no worse than in the orthogonal case. 
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